Trixbox CE v2.6 - Security settings

Document v0.1 - Last updated 06/17/2008 by Chris Sherwood

 

SureTeq is now an FtOCC authorized Trixbox support vendor.  We can provide remote support and troubleshooting, or we can design, implement and support your company's complete VoIP PBX solution.  Hourly rates and support contracts are available.  For pricing information and contact details, please email us.

 

- SureTeq now has a blog/RSS feed!  Subscribe to our blog for tips, tricks, news, and general information about all things Asterisk/Trixbox.  Click here for the SureTeq blog!

 

Not your version?  Click here to see the index of all SureTeq documentation! - Previous versions and other product documentation.

 

Change default passwords:

 

Let's change our passwords.  We need to do this at the Linux CLI.

 

Update maint password by typing ‘passwd-maint’ at the command line.  Enter the password twice.

 

Update Web meetme password by typing 'passwd-meetme' at the command line.  Enter the password twice.

 

FreePBX admin pass:

 

To change the FreePBX manager pass, you need to edit two separate files and put in the new password.

 

nano /etc/asterisk/manager.conf

 

Find 'secret = amp11' under the [admin] section.  Change 'amp11' to your new desired password.  CTRL+X followed by 'Y' to save and exit.

 

Now, we need to edit the /etc/amportal.conf to use our new password.

 

nano /etc/amportal.conf

 

Find the line that says 'AMPMGRPASS=amp11' and change the 'amp11' to the new password you just set.  CTRL+X followed by 'Y' to save and exit.

 

amportal restart

 

*** NOTE:  I have found out the hard way that FreePBX does not like having an exclamation point (!) in the admin password.  There may be other special characters that it doesn't like also. 

 

 

MySQL passwords:

 

Update the MySQL asteriskuser password by doing the following at the Linux CLI:

 

mysqladmin -u asteriskuser -p password new_password_here

 

Replacing 'new_password_here' with your desired password.  When you hit 'Enter' you'll be prompted for a password...enter in the default password of 'amp109.'

 

Now, we need to edit the /etc/amportal.conf to use our new password.

 

nano /etc/amportal.conf

 

Find the line that says 'AMPDBPASS=amp109' and change the 'amp109' to the new password you just set.  CTRL+X followed by 'Y' to save and exit.

 

***NOTE:  In the amportal.conf, there are TWO places to change the amp109 password...near the top of the file, and at the very end.  The one at the top is commented out, so changing that one doesn't really do anything...but to be consistent, make sure you change the password in both places. 

 

You will also need to update the password in the /etc/asterisk/cdr_mysql.conf file for call detail records (cdr).

 

nano /etc/asterisk/cdr_mysql.conf

 

Find the line that says 'password=amp109' and change the 'amp109' to the new password you just set.  CTRL+X followed by 'Y' to save and exit.

 

service mysqld restart
amportal restart

 

*** NOTE:  I have found out the hard way that FreePBX/MySQL does not like having an exclamation point (!) in the password.  There may be other special characters that it doesn't like also. 

It is also a good idea to change the default mysql root user password.  To change the default mysql root password, do the following:

mysqladmin -u root -p password new_password_here

 

Replacing 'new_password_here' with your desired password.  When you hit 'Enter' you'll be prompted for a password...enter in the default mysql root user password of 'passw0rd' (with a zero)

 

You will also need to update the password in the /etc/asterisk/cbmysql.conf file for meetme settings.

 

nano /etc/asterisk/cbmysql.conf

 

Find the line that says 'password=passw0rd' and change the 'passw0rd' to the new password you just set.  CTRL+X followed by 'Y' to save and exit.

 

service mysqld restart
amportal restart